mbox series

[V3,0/10] Add support for asymmetric decryption

Message ID 20231215142251.52393-1-Michael.Glembotzki@iris-sensing.com
Headers show
Series Add support for asymmetric decryption | expand

Message

Michael Glembotzki Dec. 15, 2023, 2:19 p.m. UTC 
Hi Stefano,

I wasn't sure if you were done with the review. Here comes the V3. The return
type of is_hex_str has been adjusted. Another new fix is that the ivt and
the aes-key are only set if the length is valid. Previously it was possible to
send ivt/aes-key strings that were too long.

Please note that patch file:
[V2,03/10] util: Remove unused function extract_next_file
was not sent again, but should also be applied, too.

Please let me know if there are any further change requests.

Best regards
Michael


Michael Glembotzki (10):
      util: BUG: set_aes_key does not fail on invalid aes key or ivt
      util: BUG: __swupdate_copy accepts invalid ivt
      parser: BUG: Invalid image ivt size
      parser: Read aes-key from sw-description into struct img_type
      sslapi: Add priv key/cert to swupdate_digest for asym decryption
      Add support for asymmetric file decryption with CMS
      swupdate: Initalize the recipient key pair for asym decryption
      cpio_utils: Add argument imgaeskey to __swupdate_copy interface
      Add support for asymmetrical encrypted images
      doc: Add documentation for asymmetric decryption

 Kconfig                              |  12 +++
 core/cpio_utils.c                    |  45 +++++++++--
 core/installer.c                     |   8 ++
 core/parsing_library.c               |  38 +++++++++
 core/stream_interface.c              |  41 ++++++++--
 core/swupdate.c                      |  44 +++++++++-
 core/util.c                          |  25 ++++++
 corelib/Makefile                     |   3 +
 corelib/lua_interface.c              |   2 +
 corelib/swupdate_cms_decrypt.c       | 112 +++++++++++++++++++++++++
 doc/source/asym_encrypted_images.rst | 153 +++++++++++++++++++++++++++++++++++
 doc/source/encrypted_images.rst      |   2 +
 doc/source/index.rst                 |   1 +
 doc/source/roadmap.rst               |   5 --
 doc/source/sw-description.rst        |  13 ++-
 examples/configuration/swupdate.cfg  |   3 +
 handlers/copy_handler.c              |   1 +
 handlers/delta_handler.c             |   1 +
 handlers/rdiff_handler.c             |   1 +
 handlers/readback_handler.c          |   1 +
 include/parselib.h                   |   2 +
 include/sslapi.h                     |   9 +++
 include/swupdate.h                   |   1 +
 include/swupdate_image.h             |   1 +
 include/util.h                       |   7 +-
 parser/parser.c                      |   3 +-
 26 files changed, 507 insertions(+), 27 deletions(-)